$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ae39914d-eef2-325f-91d5-490ffebec934.roa File: ae39914d-eef2-325f-91d5-490ffebec934.roa (raw, json) Hash identifier: +/w98xX8dgJYxTtBCQc4LSDKC9Y5U6kTSb8iL2FrVZY= Subject key identifier: 33:17:94:CF:A6:B1:29:E3:D7:3E:54:67:9D:D7:72:0A:28:9D:A5:2F Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584A4C3B1BC8E80BB8D9EA884E00 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ae39914d-eef2-325f-91d5-490ffebec934.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 30103 IP address blocks: 2620:123:2082::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:1b:c8:e8:0b:b8:d9:ea:88:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=08685707-00e2-4ad7-939e-a34f17908a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:30:57:e7:32:8d:1c:fc:42:03:70:be:48:c9: c3:f3:20:90:b0:23:5b:c4:3e:5e:c2:cd:75:86:91: 36:86:d4:6f:f6:06:d1:78:5e:98:4f:d9:89:c5:0d: 2f:95:21:7c:93:9a:d8:b9:20:31:c5:4e:f1:cb:c3: ac:e8:7a:2d:6d:f0:9d:32:98:e2:61:d1:c6:ac:98: 8c:82:02:a8:2d:7e:3e:1c:23:28:d0:cc:13:ed:b6: 39:8c:cf:09:f3:80:f9:01:5d:fe:05:fb:a8:f3:56: 29:a0:cc:df:f1:20:26:ef:2f:60:a0:9c:58:aa:4b: 28:6b:d6:08:bc:25:83:47:9e:86:c4:dc:6e:ae:37: d7:cd:41:7a:0e:d5:49:e2:06:09:98:cf:61:69:fb: 4b:42:6c:3b:ed:3e:05:10:c7:d6:9e:f6:0a:bd:11: fa:ea:97:75:4e:86:6d:ed:45:fe:fe:3d:76:47:a3: 81:32:43:2e:4e:41:d4:bc:88:00:79:8f:28:89:7a: 3a:52:4f:2d:45:05:a3:74:af:e6:4b:24:ed:39:db: d8:b9:97:a0:e1:4b:6a:fc:b5:2d:24:1c:2c:4d:b9: de:41:76:47:d5:84:3e:ba:bc:36:00:2a:2c:37:e4: 87:92:44:a0:2d:de:70:47:b2:54:ff:b1:d1:25:8d: 17:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:17:94:CF:A6:B1:29:E3:D7:3E:54:67:9D:D7:72:0A:28:9D:A5:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ae39914d-eef2-325f-91d5-490ffebec934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:2082::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:df:b9:36:63:8b:b0:7c:13:68:f9:50:64:e9:ff:a1:4c:c1: 8d:36:55:c9:28:3c:16:43:83:c1:b6:13:a7:0a:a2:c3:0f:c2: 85:15:aa:e7:88:d7:16:b4:25:ad:2d:5f:14:04:3a:9d:cb:7a: a1:90:fd:f1:1e:78:4e:4c:bc:dd:c5:e6:f2:f5:25:df:61:00: 6f:21:8f:17:1a:db:bc:f7:14:7f:4a:48:39:4b:4e:8f:0d:db: 4b:4e:ef:14:b3:f2:74:90:a6:86:2a:29:19:9f:da:65:e1:82: 29:1b:94:dc:26:7d:57:cc:b0:dc:5c:c5:15:9a:7b:b1:3d:38: 80:b5:d1:a9:d8:fb:09:2b:b1:66:2f:1f:6a:cc:cd:0e:b7:ef: 6d:f6:ba:fc:96:50:17:3a:a3:1a:79:fe:bc:e5:85:92:cd:b6: a9:8f:0d:91:ef:aa:b4:02:b0:92:fd:c4:92:fb:c9:3c:29:db: f5:7b:f5:18:5a:1d:19:6e:cc:2e:03:59:83:ae:4a:4e:55:0f: 58:c9:d9:2f:62:d1:87:7f:75:8e:d3:37:00:da:a3:64:e7:6b: c9:ac:da:bd:7c:72:3d:d2:c1:48:73:f6:9c:a2:c4:92:a9:fe: 02:b4:3f:d7:84:3f:4f:70:6f:70:65:5f:60:9a:43:00:da:69: d2:06:5f:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpMOxvI6Au42eqITgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MDg2ODU3MDctMDBlMi00YWQ3LTkzOWUtYTM0ZjE3OTA4YTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zBX5zKNHPxCA3C+SMnD8yCQsCNbxD5ews11 hpE2htRv9gbReF6YT9mJxQ0vlSF8k5rYuSAxxU7xy8Os6HotbfCdMpjiYdHGrJiM ggKoLX4+HCMo0MwT7bY5jM8J84D5AV3+Bfuo81YpoMzf8SAm7y9goJxYqksoa9YI vCWDR56GxNxurjfXzUF6DtVJ4gYJmM9haftLQmw77T4FEMfWnvYKvRH66pd1ToZt 7UX+/j12R6OBMkMuTkHUvIgAeY8oiXo6Uk8tRQWjdK/mSyTtOdvYuZeg4Utq/LUt JBwsTbneQXZH1YQ+urw2ACosN+SHkkSgLd5wR7JU/7HRJY0XGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDMXlM+msSnj1z5UZ53XcgoonaUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYWUzOTkxNGQtZWVmMi0z MjVmLTkxZDUtNDkwZmZlYmVjOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyCC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKnfuTZji7B8E2j5UGTp/6FMwY02VckoPBZDg8G2E6cKosMPwoUV queI1xa0Ja0tXxQEOp3LeqGQ/fEeeE5MvN3F5vL1Jd9hAG8hjxca27z3FH9KSDlL To8N20tO7xSz8nSQpoYqKRmf2mXhgikblNwmfVfMsNxcxRWae7E9OIC10anY+wkr sWYvH2rMzQ637232uvyWUBc6oxp5/rzlhZLNtqmPDZHvqrQCsJL9xJL7yTwp2/V7 9RhaHRluzC4DWYOuSk5VD1jJ2S9i0Yd/dY7TNwDao2Tna8ms2r18cj3SwUhz9pyi xJKp/gK0P9eEP09wb3BlX2CaQwDaadIGX1Q= -----END CERTIFICATE-----Generated at Mon Jun 30 09:39:42 2025 by rpki-client